Trellix Intrusion Prevention System

The IPS that goes way beyond signatures.

Download the datasheet

Comprehensive, intelligent, advanced threat protection

Trellix Intrusion Prevention System (IPS) is a next-generation intrusion detection and prevention system (IDPS) that discovers and blocks sophisticated malware threats across the network. It uses advanced detection and emulation techniques, moving beyond traditional pattern matching to defend against stealthy attacks with a high degree of accuracy.

To meet the needs of demanding networks, IPS can scale to more than 30 Gbps with a single device—and up to 100 Gbps when stacked. The integrated Trellix solution portfolio streamlines security operations by combining real-time Trellix Global Threat Intelligence (GTI) feeds with rich contextual data about users, devices, and applications for fast, accurate responses to network-borne attacks.

Deploys in the cloud and on-prem

Intrusion Prevention System+ for AWS

Trellix IPS+ Cloud for AWS protects vulnerable assets from known and unknown exploits with signature-based and signatureless detection. It employs the Trellix IVX dynamic analysis engine to detect new exploits before they enter the network. It integrates with AWS Gateway Load Balancer to deliver high availability and automatic scaling.

Intrusion Prevention System for On-Premises

Discovers and blocks threats across the network. It uses advanced detection and emulation techniques, moving beyond traditional pattern matching to defend against stealthy attacks with a high degree of accuracy, at high speed and scale.

NS 3200

Aggregate performance: Up to 750 Mbps
Maximum throughput: Up to 1 Gbps
Maximum concurrent connections: Up to 100,000
Connections per second: Up to 25,000
HTTP connections per second: 15,000

NS 7500

Aggregate performance: Up to 7.5 Gbps
Maximum throughput: Up to 12 Gbps
Maximum concurrent connections: Up to 10,000,000
Connections per second: Up to 250,000
HTTP connections per second: Up to 170,000

NS 9500

Aggregate performance: Up to 100 Gbps
Maximum throughput: Up to 100 Gbps
Maximum concurrent connections: Up to 64,000,000
Connections per second: Up to 2,500,000
HTTP connections per second: Up to 1,400,000

Benefits

Superior Detection
Real-time signature-based intrusion prevention to stop initial reconnaissance, plus signatureless detection to catch unknown exploits.
High Performance
Integration with AWS GWLB provides automatic scaling for elastic workloads; on-prem appliances: up to 100Gbps.
Reduced Complexity
Fewer components eases deployment and management. Integration with AWS GWLB simplifies high availability. Unified policies across all networks.

Features

Extend Botnet Intrusion Detection and Network Analysis

Find stealthy botnets, worms, and reconnaissance attacks hiding across the network landscape.

Enhance Threat Correlation and Context

Collect flow data from switches and routers and integrate with Network Threat Behavior Analysis to correlate unusual network behavior.

Deployment Flexibility

Discover and block advanced threats on-premises, in virtual environments, software-defined data centers, and private and public clouds.

Increase Virtual Network Visibility

Gain east-west network visibility and threat protection across virtualized infrastructure and data centers.

Inspect Network Traffic

Decrypt and analyze network traffic with inbound and outbound SSL decryption.

Multiple Clouds, One Purchase

Install and share inspection throughput across all private, public, and hybrid clouds through shared licensing and throughput model.

Product Tour

Get to know the Trellix Ecosystem

The Trellix Platform learns and adapts for living protection while delivering native and open connections and providing expert and embedded support for your team.

View Products